Comment # 2 on bug 1110245 from Yunhe Guo

Even in 2020, ISPs are still caching HTTP data in a very bad way. If ISPs send
you out-dated repo data, you will get errors when running zypper up...

This happens quite often in China. I have to answer the same kind of questions
every month and ask people to switch to HTTPS. Most users just blame openSUSE
for "bad download server" but it is because of the ISP...

I agree with Andreas Stieger that HTTPS doesn't bring extra security benefits.
But it can definitely prevent ISPs downgrade our user experience...

We must certainly keep GPG signatures for security and mirror verification. But
we can also enforce HTTPS to avoid unnecessary errors.